Senior Cyber Security Engineer (CyberArk & PAM)
Senior security engineer owning CyberArk/PAM design, deployment and operation across SysGroup's managed clients, with breadth across the security stack: Zscaler (ZIA/ZPA), EDR, SIEM, vulnerability management and email security. Includes PAM/identity integration (Entra ID, MFA, JIT access) and PowerShell/Python automation.
- Compensation
- Not disclosed
- Location
- Edinburgh, United Kingdom
- Work setup
- Not specified
- Seniority
- Senior
- Employment
- Not specified
- Experience
- 2+ years
- Category
- Security
- Posted
Skills
Must have
- 5+ years in security engineering
- 2+ years hands-on CyberArk design and administration (PAM Self-Hosted or Privilege Cloud)
- Experience deploying or operating Zscaler (ZIA/ZPA)
- Experience with at least two of: EDR platforms, SIEM, vulnerability management, email security
- Strong scripting capability (PowerShell or Python) for security tooling automation and integration
- CyberArk Defender certification (or equivalent hands-on experience)
Nice to have
- MSP/MSSP or multi-client environment experience
- Client audit exposure
- CyberArk Sentry certification
- Desirable: CyberArk Guardian, Zscaler professional-level certification (ZIA/ZPA), Microsoft SC-300, SC-200, AZ-500, or EDR vendor certifications
Full description
The Role
SysGroup is
hiring a Senior Cyber Security Engineer specialising in privileged access
management, with CyberArk as the core platform. This is the senior tooling and
identity specialist role in the Cyber Security team under our 2026 operating
model: you own the design, deployment and health of the security tooling estate
across our managed clients, with PAM as your deepest expertise.
Beyond
CyberArk, the role carries breadth across the modern security stack: hands-on
experience with Zscaler (ZIA/ZPA) and working capability across EDR, SIEM,
vulnerability management and the wider cyber product set we operate for
clients.
You will report
to the Cyber Operations Lead and work closely with the SOC engineers, the
Pre-sales Security Consultant and the Platform & Infrastructure teams.
Requirements
Key Responsibilities
CyberArk & privileged
access management
· Own CyberArk design, deployment
and operation across managed clients: vaulting, session management, secrets
management and privileged threat analytics.
· Design PAM onboarding
programmes for new clients: discovery, scoping, policy design and rollout.
· Integrate PAM with the wider
identity stack: Entra ID, conditional access, MFA and just-in-time access
patterns.
· Set privileged access standards
and evidence them for client audits (ISO 27001, Cyber Essentials Plus).
Security tooling &
engineering
· Deploy, configure and maintain
the security tooling estate: EDR, SIEM integrations, vulnerability scanning and
email security.
· Support Zscaler (ZIA/ZPA)
deployment and policy work alongside the zero trust leads.
· Own tooling health: version
currency, coverage gaps, tuning quality and integration reliability.
· Automate deployment and
operational tasks with scripts and APIs; contribute to the shared automation
library.
Service & quality
· Act as senior escalation for
identity and tooling incidents; support major incident response.
· Document designs, runbooks and
standards to a level the wider team can operate from.